# AIVSS05 - Agent Identity Impersonation

> An agent impersonates another agent, or a human, to exploit trust (deepfakes, forged agent cards, agent-in-the-middle).

- **Category**: Owasp AIvss
- **Subcategory**: core_security_risks
- **Canonical URL**: https://designpattern.fyi/patterns/aivss05_identity_impersonation/

---

## Description
'**Intent**: Prevent agents from impersonating other agents or humans to exploit trust relationships.

**Context**: Agents can forge their identity, create deepfake personas, or insert themselves as man-in-the-middle between trusted parties. This allows attackers to exploit established trust relationships for malicious purposes.

**Solution**: Implement strong identity verification and attestation. Use cryptographic proofs of identity. Monitor for anomalous identity patterns. Implement agent identity cards with verifiable credentials. Detect deepfake patterns and synthetic personas. Use zero-trust principles for all agent interactions.'



## Use Cases
Use when agents interact with other agents, humans, or systems where identity verification is critical.





## Trade-offs


### Advantages

- Prevents impersonation attacks

- Protects trust relationships

- Enables identity verification

- Supports zero-trust architecture




### Considerations & Drawbacks

- Identity verification adds overhead

- Deepfake detection is challenging

- Trust establishment complexity







---
**Reference**: [Original Source](https://aivss.owasp.org/)